Threats tagged 'ghsa-3vhh-v9v8-vm2m'

A cross-site scripting (XSS) vulnerability exists in Argilla up to version 2.8.0 within the Dataset.from_disk function of the Settings Page component. This flaw allows remote attackers to manipulate the Name argument, potentially leading to XSS attacks. The vulnerability has a low CVSS score of 3.5 and requires user interaction with low privileges. The project has been informed but has not yet responded or issued a fix. Exploit code is publicly available.